Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e39382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7o9rY/OA8nkoai1Ux1nMKcBL8d6FNtHe8gtdJLyHWbs=
Subject key identifier: 59:13:F0:44:BA:52:95:E4:BD:8A:4F:FE:0B:DA:13:45:94:32:7B:3B
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 4DFAE48D753BDFBACF881F79A4063AADE3CFA39F
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
Signing time: Sun 01 Mar 2026 02:46:20 +0000
ROA not before: Sun 01 Mar 2026 02:41:20 +0000
ROA not after: Sun 28 Feb 2027 02:46:20 +0000
asID: 834
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fa:e4:8d:75:3b:df:ba:cf:88:1f:79:a4:06:3a:ad:e3:cf:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 1 02:41:20 2026 GMT
Not After : Feb 28 02:46:20 2027 GMT
Subject: CN=5913F044BA5295E4BD8A4FFE0BDA134594327B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:87:7d:b9:d7:26:7e:c7:fb:2d:ea:c2:d7:
b7:5b:9d:b1:40:81:6c:58:4a:c0:6e:dc:46:ff:a3:
0e:73:ca:35:3a:00:7a:73:57:83:c6:59:81:48:74:
c4:da:8a:05:f6:04:17:1a:94:5c:02:dc:91:35:4c:
ad:31:ba:26:35:f7:c0:ab:59:0d:87:12:d2:f8:8a:
fb:95:59:c3:c4:44:b4:d1:c7:09:71:15:37:50:40:
d9:4e:15:17:79:81:c0:a6:a4:ef:91:f6:36:c7:f1:
a5:32:c3:51:52:2a:9a:fb:d9:57:4c:8b:c8:c2:fc:
14:eb:bd:ee:93:a5:e5:d0:79:39:c3:ef:7e:5e:20:
70:a9:c2:a5:c3:8e:1f:1d:ce:1b:37:7d:52:59:df:
0c:61:4d:bc:43:a1:90:c1:c2:47:f2:b0:86:18:31:
28:46:79:ea:0d:77:bb:eb:4a:ea:f8:3a:ef:a1:9e:
13:53:31:55:5c:2f:e0:66:7d:fd:18:77:c4:ba:56:
53:a3:ba:19:59:58:5b:14:c7:23:a3:f4:96:9a:dc:
70:f4:ef:9d:a3:77:89:e5:ba:f0:35:a7:ff:87:0d:
6c:5c:25:83:22:5d:6d:9b:35:7b:59:6b:97:83:3d:
25:bf:df:f1:8e:2d:87:ae:9d:0e:ae:f0:10:57:80:
53:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:13:F0:44:BA:52:95:E4:BD:8A:4F:FE:0B:DA:13:45:94:32:7B:3B
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ed:f9:a0:63:43:4d:7b:dc:58:6e:71:b2:f2:dc:6c:00:ec:
32:9a:fb:3b:79:cc:f9:24:6a:66:a7:7f:7b:0f:95:ea:fb:b2:
d7:85:b2:7c:4e:11:d3:36:08:fc:f3:48:57:cf:42:69:94:bf:
ec:fa:c9:17:e8:83:d9:ea:04:07:1e:3f:a6:0c:b8:71:80:1a:
a9:07:cb:a7:ce:0e:2f:4b:a3:39:d6:f6:f3:47:61:b0:b4:9f:
c3:46:9b:20:4d:47:f2:fe:35:ba:37:47:6e:15:fe:d8:a5:40:
83:61:5b:10:c1:5b:3b:c5:d9:28:58:9b:bc:d2:51:c4:1c:83:
9c:67:7d:e8:a3:29:7a:89:fa:b9:4b:c9:8e:da:b9:3a:d1:48:
9e:6e:3b:0e:74:5c:c8:fd:80:cb:5d:d1:2f:45:26:2c:06:56:
95:9a:cb:bb:ee:02:a1:61:a5:bd:1f:ae:ad:1b:38:f7:c1:57:
9e:fc:00:ee:96:c8:58:4f:5b:3d:17:b3:32:12:18:1e:04:cc:
17:41:0e:c4:64:ee:19:5d:3d:31:74:f4:e0:6f:e9:02:77:03:
a5:01:d9:94:f2:ef:37:e5:f7:7b:6e:b1:6a:cf:7b:46:e7:ff:
ac:c0:8c:b0:79:34:47:33:88:6c:89:18:1f:33:ef:a0:60:0e:
cc:f8:f0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:56 2026 by rpki-client